From the 'Lectric Law Library's Stacks
While the credit industry feels that credit issuers and merchants are the only victims, cases of fraud have proven far more detrimental to the consumer whose card(s), account(s) and/or personal identifiers have been used by the defrauder
By David A. Szwak
The credit industry is trying to replace cash, as a medium of exchange, with a computerized credit and debit card system which would electronically transact all of our financial affairs and track our every move. Smart cards, the financial information superhighway and complete absence of privacy appear to be in our future. It has been estimated that each American possesses an average of six (6) credit card accounts. Every American needs to understand the credit system and its rapidly changing role in our lives. Credit fraud is rampant and is growing exponentially in America. While the credit industry feels that credit issuers and merchants are the only victims, cases of fraud have proven far more detrimental to the consumer whose card(s), account(s) and/or personal identifiers have been used by the defrauder. This article provides an overview of credit cards, their usage, liability of cardholders and card bearers, credit fraud, credit reports and related topics.
WHAT IS A CREDIT CARD?
Generally, "credit" is merely a contract between a consumer ["cardholder"] and the credit issuer [bank, credit card company or other lender]. It results from an offer and acceptance. A "credit card" is merely an indication to merchants that the person who received the card has a satisfactory credit rating and, if credit is extended by the merchant, the issuer of the card will pay or insure that the merchant receives payment for the merchandise delivered. Further, use of a credit card by the cardholder is an implied, if not actual, representation that the cardholder intends to pay the credit issuer for the charges made. The issuance of credit constitutes an "offer" of credit which may be withdrawn by the issuer at any time, for any lawful reason, and prior to "acceptance" of the "offer" through the use of the credit card by the cardholder.
NECESSARY INVESTIGATION BY CREDIT ISSUER
Credit issuers usually rely upon applications to conduct their business. Credit issuers may receive anywhere from a few to thousands of credit applications a day. In the high volume setting one can only wonder what procedures are in place to insure that the application is truthful and not fraudulent. American courts have consistently held that credit issuers have a duty to exercise reasonable care and diligence in performing a "necessary investigation" of each credit application received and the investigation of each application must occur prior to the issuance of credit. As part of the investigation the issuer must verify the underlying information on the application, including the applicant's identity and authority, prior to the issuance of credit. After all, credit issuers are in a superior position to prevent and stop credit fraud, particularly, "application fraud," where the cardholder listed on the application never applied for or received the charge card or template. In Humble Oil & Ref. Co. v. Waters, the Court found the credit issuer liable for carelessly sending a credit card through the mail on the authority of an anonymous telephone caller. The credit issuer failed to use any reasonable procedures to verify the identity of the caller.
In resulting fraud instances, courts have not held credit issuers strictly liable for approving fraudulent applications in the identity of the victim but issuers must exercise reasonable diligence and care to prevent such losses as it adversely affects all consumers and, specifically, the targeted victim of fraud. Credit card issuers frequently have meager, automated procedures to investigate and evaluate applications and place greater emphasis on collection. Still others have procedures in place but employee incentive or laxity results in routine deviation from the guidelines. At least one court has held that a credit issuer's failure to follow its own proclaimed standards does not, of itself, prove negligence of the credit issuer, unless the erroneous information in the application would have placed a reasonably prudent credit issuer on notice that the credit application was fraudulent.
INVESTIGATION AT THE POINT OF SALE
One can only wonder why retailers and other merchants do not verify the identity of credit card users at the point of sale. Some have suggested a myth created by the credit industry caused this problem. It is a myth that it is illegal to ask a card user to present identification at the point of sale. It is outright reckless conduct to tender merchandise to a card bearer without any verification and/or recordation of personal identification. In fact, courts have ruled that retailers have a duty to exercise reasonable care to inquire about the identity of a purchaser using a charge card, to examine the charge card or template and only extend credit as the card or template authorizes and not merely disregard responsibility for resulting fraud.
WHO IS A CARDHOLDER?
A "cardholder" is the person whose personal identifiers are listed on the application made to the credit issuer. The cardholder is not liable for fraud perpetrated through the use his identifiers. The Truth-In- Lending Act defines "cardholder" as "any person to whom a credit card is issued or any person who has agreed with the card-issuer to pay obligations arising from the issuance of a credit card to another person." Further, the cardholder is not liable for fraud committed through the misuse of his account number or credit card. The cardholder(s), as the party(ies) to the contract with the issuer, is (are) solely responsible for charges and users and holders of related cards are not liable for charges made on the account.
Only cardholders are contractually liable for debts incurred by use of the credit card. Mere card users, bearers or holders of related cards, even if authorized to use the card, are not liable for such debts. The same may not be true for co-applicants or subsequently added cardholders on the account, which result in the creation of a joint account. Attempts to argue that a cardholder does not have authority to use the account have been unsuccessful. One court held that a corporation's liability was not limited based upon alleged unauthorized use by an individual where the individual was the cardholder to whom card was issued. A cardholder always has actual authority. This holding blurred the distinction between cardholder and card bearer and may have been more properly decided upon a failure by cardholder (corporation) to provide adequate notice of potential or real misuse of the account by a formerly authorized card bearer. The blurred distinction has also occurred in cases where the person who received a credit card in their name, used the card, and received the billings for charges and later argued that they were not a cardholder. At least one court found such a person to be a cardholder and imposed liability for charges.
TRUTH-IN-LENDING ACT DOES NOT APPLY IF AUTHORITY FOR USE EXISTED
The Truth-In-Lending Act provides consumers protection when fraud or unauthorized use of their credit card(s) occurs. If the court finds that the card bearer had "actual, implied or apparent authority" then the Truth-In-Lending Act has no application, per 15 U.S.C. 1602(o), 1643, and the cardholder's contract with the credit issuer and state law applies. The defense of "unauthorized use" may be used in situations where the issuer sues the cardholder in an attempt to collect. In such situations, the credit issuer has the burden of proving that the particular use of the card was "authorized".
"AUTHORIZED USE" VERSUS "MISUSE" VERSUS "UNAUTHORIZED USE"
Generally, when a cardholder, under no compulsion by fraud, duress or otherwise, voluntarily permits the use of his credit card or account by another person, the cardholder has "authorized the use" of that credit card and account and is thereby liable for charges resulting, even if the cardholder verbally told the other person not to charge over a certain limit. As to the creditor, once you give authority to the third person, regardless of the scope, you are liable under agency principles. "Misuse" occurs when the card bearer exceeds the authority granted by the cardholder and particular charges are eventually made which were not contemplated by the cardholder. "Unauthorized use," for purposes of determining liability of a credit cardholder, is use of a credit card by a person, other than the cardholder, who does not have actual, implied or apparent authority for such use and from which the cardholder receives no benefit. Unauthorized use of a credit card occurs when a card bearer is not authorized and where there is no proof that the bearer was cardholder's agent or that cardholder ratified bearer's conduct.
Courts are split on whether a cardholder can "after the fact" limit his exposure for charges attributable to a card bearer, who has gone astray and begun to misuse the card. The use was initially "authorized" with actual authority granted. One court has responded that the user of a credit card to whom the cardholder has voluntarily given permission to use the card has "apparent authority" to use the card even after actual authority ceases to exist.
THE IMPORTANCE OF NOTIFICATION TO THE CREDIT ISSUER IF MISUSE OCCURS
There is conflicting jurisprudence as to whether notice to the credit issuer, that a card bearer has exceeded the authority granted and is in possession of a charge card, will terminate responsibility for the charges occurring thereafter. The dissent in Walker Bank & Trust Co. v. Jones, argued that notification should cut off liability for three (3) main reasons: (1) credit issuers are in a superior position, once notified of potential misuse, to limit losses to the cardholder, itself (credit issuer) and third parties (retailers, etc.); (2) 15 U.S.C. 1643 and state laws of "agency" dictate that agency ends upon termination of authority by cardholder as to the card bearer and apparent authority vis-a-vis the credit issuer cannot be argued once the credit issuer is on notice; and (3) holding the cardholder liable is unrealistic and promotes a divorcing spouse to usurp the other spouse's credit cards or account numbers for misuse with the knowledge that the law would hold the cardholder (other spouse) liable.
Once the credit issuer receives notice of potential misuse of an account, the issuer has the sole power to terminate the existing account, refuse to pay any charges on the account, list the credit card as stolen or lost on national/regional warning bulletins, transfer all existing, valid charges to a new account and send the cardholder a new card bearing his new account number. The credit issuer's situation is far better as a result of notification that a card has been lost, stolen of misused, as opposed to situations where the card is stolen without notice, because the issuer is on notice of possible problems and may even be alerted as to the whereabouts and identity of the card bearer.
Some courts have addressed situations where the misuser (card bearer) was still in possession of the card and no notice was provided to the credit issuer. One court found the charges made by cardholder's ex- husband were authorized. The husband was still in possession of one of the cards and, at all times, was ostensibly authorized to make charges. But for the failure of cardholder to explain the situation, the credit issuer would have prevented further misuse. Yet another court applied an estoppel theory to preclude an employer's defense to liability for charges, where the employer had provided charge cards to his employees for use and then failed to notify the credit issuer when he transferred the company. On the other hand, one court has held that where the husband (cardholder) notified the creditor to close his account and that his ex-wife had a charge card and the creditor knew the exact location where ex-wife continued to make purchases and that ex-wife was the person charging, yet the creditor failed to act, the husband was not liable.
IMPLIED OR APPARENT AUTHORITY:
Courts have also imposed liability upon cardholder who clothe another with apparent authority to use cardholder's account or charge template. Generally, "apparent authority" exists where a person has created such an appearance of things that it causes third party reasonably and prudently to believe that second party has power to act on behalf of first person. Prior, unrelated occasions where cardholder allowed third party to use credit card had no bearing on specific subsequent circumstance of unauthorized use.
Courts have tended to find apparent authority when a cardholder requests a credit card, in a spouse's name and bearing a spouse's signature on the card. Such a representation to third persons such as merchants, to whom the card might be presented, is tantamount to apparent authority that the spouse is authorized to use the card and make charges. Some courts have held that mere transfer of the charge template to a spouse or other third party created apparent authority and the cardholder was estopped to deny liability. One court has questioned the existence of apparent authority if a credit issuer has been notified of potential misuse of a credit account. How can any apparent authority exist between the cardholder and ultimate retailer, to whom the card is presented, vis-a-vis the credit issuer? The credit issuer has been placed on notice of the card theft or loss.
CARDHOLDER'S LIABILITY FOR UNAUTHORIZED USE
As a general rule, a cardholder is not liable for unauthorized use. There is no liability for unauthorized use of a credit card, except where the card is an "accepted credit card" then liability is not in excess of $50.00 and $50.00 is due only when and if: (1) the issuer provided the cardholder with adequate notice of the limited liability; (2) the issuer provided the cardholder with a description of means by which the issuer may be notified of the loss or theft of the activated card; (3) unauthorized use occurred before the card issuer had been notified that the cardholder no longer possessed the card or template; and (4) the issuer provided a method whereby the user of such card can be identified as a person authorized to use the charge template.
FORGERY AND FRAUD
A cardholder is not liable for charges where another person forged cardholder's name on a credit card application and cardholder knew nothing about the credit card until he received bills. Courts have acknowledged that cardholders have little or no control over the fraudulent conduct of third persons who come into possession of charge cards bearing the cardholder's identity and cardholder is not liable for fraud-related charges unless fault of cardholder is proven.
One court has held that defendant, to whom an unsolicited bank card was issued but never used by defendant, was not liable for purchases made with the card by a woman that the defendant subsequently married and who took the card without his knowledge when they separated several weeks later. Defendant never expressly or impliedly authorized her use of the card. It appears the issuer would have violated 15 U.S.C. 1642, if it had been in effect at the time the card was sent to defendant.
Almost twenty five (25) years ago, the United States Supreme Court noted that, in 1969 alone, 1.5 million credit cards were lost or stolen resulting in fraudulent charges exceeding $100,000,000.00 Fraud today equates to billions of dollars per year and that cost is borne by consumers in the form of higher interest rates and fees.
DISSOLUTION OF MARITAL PROPERTY REGIMES AND JOINT ACCOUNTS
When joint credit account holders divorce, they should obtain consent of their creditors before attempting to enter dissolution of property decree wherein one spouse accepts responsibility for former joint account. Both spouses remain liable on the account. At least one court has rejected claims by joint cardholder against creditor, where the joint cardholder, a divorced woman, whose report listed bad joint debt by a credit bureau on the basis of her ex-husband's credit rating, attempted to recover against creditor on the basis that the dissolution of property decree freed her from liability for the joint credit charge account debts which ex- husband agreed to assume in the dissolution.
FAIR CREDIT BILLING ACT: A WEAK EFFORT TO ASSIST CONSUMERS IN RESOLVING CHARGE DISPUTES
The Fair Credit Billing Act [FCBA], 15 U.S.C. 1666, et seq., sets forth an orderly procedure for identifying and resolving disputes between a cardholder and a card issuer as to the amount due at any time. The FCBA only applies to transactions under open-end credit plans. The consumer has a right to challenge a creditor's statement of an account in consumer's name. The FCBA provides protection to the consumer from the "shrinking billing period" which is the time within which to avoid the imposition of finance charges by payment of the balance or portion of the debt. The consumer has a right to make the creditor promptly post payments and credits to his account. If the creditor fails to comply with 15 U.S.C. 1666 and 1666a, the creditor is subject to forfeiture of their right to collect the disputed amount. The consumer has the right to assert all claims and defenses against the credit card issuer which the cardholder has against the merchant honoring the card. The FCBA applies to credit cards.
The consumer has an action for actual damages sustained from the creditor who violates FCBA and the creditor must pay a civil penalty of twice the finance charge (minimum of $100.00, maximum of $1,000.00), plus court costs and a reasonable attorney's fees. Class actions are may be instituted under 15 U.S.C. 1640.
Ordinarily, a consumer must notify creditor of alleged billing error before bring action under FCBA. The consumer is not required to send written notice of billing error to creditor where the creditor continues to report the account as delinquent, when in fact it had been satisfied and the creditor had failed to ever send a periodic statement to consumer. In cases where the creditor must be notified, the sixty (60) days notice period commences to run from the date the disputed statement is received by the debtor. Debtor must make written dispute within sixty (60) days.
LIMITATIONS OF PROTECTION OF FCBA:
The FCBA has certain limitations which may apply under various circumstances. The consumer must provide the creditor with written notice within sixty (60) days of the date the consumer receives the erroneous (disputed) billing. The notification must contain certain items of information (completely identify yourself and the account, bill and/or charges in question) and a clear dispute (explain to the best of your ability why you think the bill is in error).
Tort claims may not be asserted under FCBA. The consumer (obligor) must make a "good faith attempt" to satisfactorily resolve the disagreement with the person honoring the card. The amount of the transaction must exceed $50.00. The transaction must occur in the same state as the cardholder's mailing address, or must occur within 100 miles of the cardholder's mailing address. The amount of the claims or defenses asserted may not exceed "the amount of credit outstanding with respect to such transaction at the time the cardholder first notified the card issuer or person honoring the credit card. Note that payments and credits to the cardholder's account are deemed to have been applied, in the order indicated, to the payment of: (a) late charges in the order of their entry to the account; (b) finance charges in order of their entry to the account; (c) debits to the account (other than those above) in the order in which each debit entry to the account was made.
The above mentioned limitations have an exception that exists when: (1)
the amount of the transaction must exceed $50.00; and (2) the
transaction must occur in the same state as the cardholder's mailing
address, or must occur within 100 miles of the cardholder's mailing
address. In essence, those restrictions do not apply when the person
honoring the credit card (retailer):
(a) is the same person as the card issuer;
(b) is controlled by the card issuer;
(c) is under direct or indirect common control with the card issuer;
(d) is a franchised dealer in the card issuer's products or
(e) has obtained the order for such transaction through a mail
solicitation made by or participated in by the card issuer; or
(f) where the defense or claim can be classified as a "billing
error" rather than an assertion of a claim or defense.
WHERE DO I GET MY CREDIT REPORTS AND HOW DO I HANDLE ERRORS?
The standard credit report contains a vast amount of personal information, trade line (account) information, and public record data. The report also contains a listing of credit inquiries, who are those persons who have peered into the consumer's file, and "credit scoring," which is the credit bureau's numerical assessment of the consumer as a credit risk. There are three (3) major consumer reporting agencies (superbureaus) in America:
TRW Inc. Equifax Credit/CSC Credit
P.O. Box 2350 P.O. Box 740193
Chatsworth, California Atlanta, Georgia 30374 or
91313-2350 652 North Belt East, Ste. 400
800) 422-4879 Houston, Texas 77267
(214) 390-3569 (713) 878-1900
FAX 390-1680 (800) 685-1111
FAX (404) 612-3150
FAX (713) 878-4882
Trans Union Corporation
111 West Jackson, 16th Floor
Chicago, Illinois 60604
Other credit bureaus are usually affiliated with one or more of the three major superbureaus. If you obtain your report through an affiliate bureau, make sure you know which superbureau provided the data found in the report and check with the other two superbureaus. These are three independent databases and each is likely going to have different data. Curing errors on one of the databases does not effect results on the other two.
You need to write the major consumer reporting agencies and fully identify yourself by name, address, social security number, date of birth, spouse's name (if married) and your addresses for the past five (5) years. Request a copy of all information they maintain about you. If you have been denied credit in the recent past then the report is free. TRW is required to provide you one (1) free report per year. Most states passed laws governing the price of a credit report under other circumstances.
Once you receive your report(s) you should carefully read the instructions and analyze the entire report. There are several types of problems that are common: inquiries made without your approval; errors in personal information listed on the report; credit or collection accounts you did not create; negative ratings on accounts which do belong to you; and/or public records information which is erroneous.
If you find any errors in your address, employment or other personal information, you must write the agency and demand correction. In each situation discussed, ask for a corrected copy of the report to be sent to recent authorized inquirers into your report.
Erroneous public record data or public record data improperly placed on a consumer's report can be the most damaging type. It is widely acknowledged that a bankruptcy, which can stay on your credit reports for ten (10) years from judgment, is the most negative mark which can be placed on a credit report. If you have erroneous public records data on your report, you need to communicate directly with the consumer reporting agency.
The reports will contain a listing of bureau subscribers who have been peering into your information. Inquiries can cause a creditor to deny credit. Potential creditors look for heavy inquiries or inquiries without corresponding trade lines and treat such a "red flags". Make the inquirers tell you why they looked at your file. If they have no permissible purpose, you should consider contacting the Federal Trade Commission, the United States Secret Service and the consumer reporting agency (who allowed the access). Confidentiality of your credit report is critical and bureau subscriber should use their terminal and report access in a responsible manner. A private civil action may also lie under the Fair Credit Reporting Act [FCRA].
When you find an error in credit account or public records information you must first determine whether the listed account or information is something which you created or allowed to be opened in your name. If the trade line is yours, you have a "billing dispute". You must write the creditor and each major consumer reporting agency and fully identify yourself and state your dispute. A proper consumer dispute, concerning a credit account, is one that places the card issuer on notice as to the name of the consumer, the credit account number, a statement that the account or reporting is in error, and a statement as to why the consumer believes the error exists, if possible.
After receiving your notice of dispute the creditor must, within thirty (30) days, send you written acknowledgment of your dispute and, not later than ninety (90) days after receipt of your notice, either make the appropriate corrections in your report or send a written explanation to you, after conducting an investigation of your dispute, setting forth the reasons why the creditor believes the present, disputed entry on your report is correct. After you provide a dispute letter to the creditor, the creditor "may not directly or indirectly threaten to report adversely on the obligor's credit rating or credit standing because of the obligor's failure to pay the amount (the disputed amount)..." You must pay any undisputed portion of the bill. If the dispute persists, a civil action may be required to remove the error from your report. Consumer reporting agencies must not only assure the "maximum possible accuracy" of data entered on your report but must employ reasonable procedures to promptly investigate disputed matters. Currently, consumer reporting agencies cater to their subscribers and very rarely delete disputed data unless the creditor-subscriber directly orders the deletion. This is one area where the industry refuses to comply with the FCRA. The FCRA provides limited immunity to creditors- subscribers for the reporting of false data. Nonetheless, the reporting or failure to cause deletion of inaccurate data previously reported by the creditor-subscriber can dispense with immunity and provides a basis for reckless and willful conduct.
Also, immediately write the reporting agency, in the separate request, and demand that a "victim's statement" be added to your report. The "victim's statement" is also referred to as the "statement of dispute". Be sure that each consumer reporting agency lists the statement on your report and all subsequently issued reports. Each credit report issued by each consumer reporting agency must bear the victim's statement.
TIGHTENING THE SCREWS ON THE CUSTOMER
Courts have recognized that a credit issuer's "ability to report on the credit habits of its customers is a powerful tool designed, in part, to wrench compliance with payment terms from its cardholder." Thus, a creditor's "refusal to correct mistaken information can only be seen as an attempt to tighten the screws on a non-paying customer." Further, an erroneous or careless report serves no purpose but to substantially damage the target of the report, who after publication can do little to correct the damage caused by the report.
Credit cards, smart card and other electronic transactions will apparently replace the cash medium in our near future. We need to understand our rights regarding credit cards, fraud and credit reports. We need to be ready to improve our laws when faced with changes in technology. Few Americans have ever seen their credit report(s) and do not realize the impact that reports have on their ability to utilize their valued property rights in their reputation and credit worthiness.
Brought to you by - The 'Lectric Law Library
The Net's Finest Legal Resource for Legal Pros & Laypeople Alike.